CVE-2020-13965

LLM-synthesized narrative grounded in this CVE's description and references.

• Roundcube/Webmail2 versions

  cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*range: <1.3.12
  • (no CPE)range: <1.3.12 and <1.4.5
• Debian/linux2 versions

  cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
• Fedoraproject/Fedora2 versions

  cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
• Roundcube/Roundcube Webmaildescription
• Roundcube/Roundcubemailllm-fuzzy

  Range: <1.3.12 and <1.4.5
• osv-coords

  pkg:bitnami/roundcube

  Range: < 1.3.12

• github.com/roundcube/roundcubemail/commit/884eb611627ef2bd5a2e20e02009ebb1eceecdc3nvdPatchThird Party Advisory
• github.com/roundcube/roundcubemail/compare/1.4.4...1.4.5nvdPatch
• github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-RoundcubenvdExploitThird Party Advisory
• roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12nvdVendor Advisory
• www.debian.org/security/2020/dsa-4700nvdThird Party Advisory
• github.com/roundcube/roundcubemail/releases/tag/1.3.12nvdRelease Notes
• github.com/roundcube/roundcubemail/releases/tag/1.4.5nvdRelease Notes
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLESQ4LPJGMSWHQ4TBRTVQRDG7IXAZCW/nvdMailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODPJXBHZ32QSP4MYT2OBCALYXSUJ47SK/nvdMailing List
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

No linked articles in our index yet.